Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa
File: 2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa (raw, json)
Hash identifier: RaceEYp+9x/nmRjbttzsLu4fwsF5EmfcJqvuxa0ObDg=
Subject key identifier: D8:4A:8B:39:72:8D:BE:C1:A6:A2:3E:F1:A6:E4:C4:29:C3:AD:0A:B3
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DD4F76C63188D4A466083F46E6D0
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205547
IP address blocks: 46.32.168.0/24 maxlen: 24
46.32.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:4f:76:c6:31:88:d4:a4:66:08:3f:46:e6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d84a8b39728dbec1a6a23ef1a6e4c429c3ad0ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:61:5c:59:f9:1b:d4:e4:e9:b0:6d:d8:62:cf:
ae:10:16:aa:53:c8:3e:22:6e:df:50:15:b6:43:e2:
8f:27:1a:0a:2e:dd:ed:c6:8e:b5:25:95:48:39:55:
0c:4a:12:87:e5:95:83:59:32:62:ff:5c:bb:a1:c2:
82:7f:97:36:d6:de:a6:46:69:5c:81:0d:dc:85:74:
5b:5f:d9:d8:33:57:c5:7c:ad:77:25:a0:4f:5c:92:
72:55:1c:d2:ed:51:e0:45:c7:c5:9d:b1:bd:ab:2b:
03:dc:4c:14:55:8a:3e:5c:1d:67:26:1b:a0:0d:5f:
c5:45:e9:59:73:7e:49:b0:bc:3b:95:61:07:3e:f6:
c7:b1:7b:8b:c3:21:1c:86:f7:62:33:9c:cb:ae:d5:
6c:c9:b3:df:ac:08:cc:36:1f:51:c0:27:98:65:7b:
df:7f:90:ae:e4:f9:7e:22:42:63:1d:1a:8b:14:51:
34:22:eb:1d:97:a7:4f:6c:aa:4d:d1:37:4c:c1:72:
da:a9:c6:b3:93:f1:1c:aa:40:55:e4:ee:83:e9:f7:
b8:35:20:fd:96:92:6a:82:4e:19:47:7e:a3:17:54:
c2:ec:a8:55:72:eb:e7:ff:df:cc:2b:97:0d:ad:be:
c3:59:96:d2:f4:17:ef:03:8e:c2:21:84:48:e4:e8:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:8B:39:72:8D:BE:C1:A6:A2:3E:F1:A6:E4:C4:29:C3:AD:0A:B3
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2EqLOXKNvsGmoj7xpuTEKcOtCrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.168.0/24
46.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d8:13:11:64:de:f3:40:ac:85:63:be:fb:ee:33:ca:0a:04:
2b:a4:a4:5b:65:da:07:a7:31:df:f3:46:d6:73:19:e7:c7:23:
b3:c0:2e:99:96:ae:d3:e8:15:4f:70:60:e4:ab:a9:7f:72:42:
d5:6b:bb:a1:b4:11:14:0d:75:eb:1a:a5:60:c6:f9:d3:7d:07:
d3:92:02:03:e1:43:81:8b:c5:cc:6e:47:89:06:cc:42:53:5d:
80:ce:d9:45:02:47:cd:70:b3:b7:5d:bc:a3:8b:19:4b:cc:d0:
bb:aa:67:6f:4e:b7:05:1b:9e:99:c5:21:e1:ae:2d:75:8d:70:
7c:9b:89:c8:73:6b:2b:c0:6c:2f:ff:90:a5:c1:a4:41:67:c5:
47:07:3d:09:57:4b:ab:6e:3e:44:a2:8b:78:6d:05:82:04:31:
e3:78:9d:fa:c4:2a:8e:58:03:fb:6d:98:99:64:c7:b6:7e:ac:
a3:2a:8f:9d:2f:d9:32:2e:4f:01:82:16:ab:06:d4:e0:38:71:
95:bc:86:75:dc:65:4b:72:92:03:89:1e:6b:25:01:a3:08:35:
58:f7:c8:a6:ab:a8:7e:89:40:b0:f1:33:4c:24:65:ef:60:e8:
34:92:73:03:0e:6f:e7:4f:a3:09:a3:aa:20:7d:2d:16:c7:9c:
46:c6:98:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaN1PdsYxiNSkZgg/RubQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjM1ODUzMTgzOTg0NDc5YTlkNjlmNDBhMTk0ZjBiOGI2
N2UxNjUwHhcNMjYwNzAyMTUxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODRhOGIzOTcyOGRiZWMxYTZhMjNlZjFhNmU0YzQyOWMzYWQwYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GFcWfkb1OTpsG3YYs+uEBaqU8g+
Im7fUBW2Q+KPJxoKLt3txo61JZVIOVUMShKH5ZWDWTJi/1y7ocKCf5c21t6mRmlc
gQ3chXRbX9nYM1fFfK13JaBPXJJyVRzS7VHgRcfFnbG9qysD3EwUVYo+XB1nJhug
DV/FRelZc35JsLw7lWEHPvbHsXuLwyEchvdiM5zLrtVsybPfrAjMNh9RwCeYZXvf
f5Cu5Pl+IkJjHRqLFFE0Iusdl6dPbKpN0TdMwXLaqcazk/EcqkBV5O6D6fe4NSD9
lpJqgk4ZR36jF1TC7KhVcuvn/9/MK5cNrb7DWZbS9BfvA47CIYRI5Oha6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNhKizlyjb7BpqI+8abkxCnDrQqzMB8GA1UdIwQY
MBaAFG8jWFMYOYRHmp1p9AoZTwuLZ+FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvMkVxTE9YS052c0dtb2o3eHB1VEVLY090Q3JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvYnlOWVV4ZzVoRWVhblduMENobFBDNHRuNFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCoAwQA
LiCuMA0GCSqGSIb3DQEBCwUAA4IBAQCd2BMRZN7zQKyFY7777jPKCgQrpKRbZdoH
pzHf80bWcxnnxyOzwC6Zlq7T6BVPcGDkq6l/ckLVa7uhtBEUDXXrGqVgxvnTfQfT
kgID4UOBi8XMbkeJBsxCU12AztlFAkfNcLO3XbyjixlLzNC7qmdvTrcFG56ZxSHh
ri11jXB8m4nIc2srwGwv/5ClwaRBZ8VHBz0JV0urbj5Eoot4bQWCBDHjeJ36xCqO
WAP7bZiZZMe2fqyjKo+dL9kyLk8BgharBtTgOHGVvIZ13GVLcpIDiR5rJQGjCDVY
98imq6h+iUCw8TNMJGXvYOg0knMDDm/nT6MJo6ogfS0Wx5xGxpjI
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:44 2026 by rpki-client